Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c1b5cd0c-cfcd-4d54-8df6-4d8f7aab486f/0ef8af27ee855ea164e5534deffd967560d523af.roa
File:                     0ef8af27ee855ea164e5534deffd967560d523af.roa (raw, json)
Hash identifier:          GWWfycVLzN8XGHlS4H7uDoUisK1pmpO49CqpWxzBuvY=
Subject key identifier:   70:3B:E2:70:A8:EF:BD:E0:A3:9E:32:8F:34:5E:96:89:8D:B9:17:63
Certificate issuer:       /CN=4c3cd5f9f99449a9d5c415bb976bf368d87776d9
Certificate serial:       0CF8B8
Authority key identifier: 23:B6:77:C3:D9:DE:AB:E9:70:47:31:32:DA:13:9A:7E:28:FF:35:4D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4c3cd5f9f99449a9d5c415bb976bf368d87776d9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/c1b5cd0c-cfcd-4d54-8df6-4d8f7aab486f/0ef8af27ee855ea164e5534deffd967560d523af.roa
Signing time:             Wed 24 Mar 2021 14:31:51 +0000
ROA not before:           Wed 24 Mar 2021 14:31:51 +0000
ROA not after:            Tue 24 Mar 2026 14:31:51 +0000
asID:                     267679
IP address blocks:        45.162.63.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 850104 (0xcf8b8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c3cd5f9f99449a9d5c415bb976bf368d87776d9
        Validity
            Not Before: Mar 24 14:31:51 2021 GMT
            Not After : Mar 24 14:31:51 2026 GMT
        Subject: CN=0ef8af27ee855ea164e5534deffd967560d523af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:30:3f:6a:80:23:21:dd:d8:0c:0a:3e:76:b5:
                    10:b1:ae:97:31:93:51:1d:3a:75:0f:6e:0c:f4:15:
                    8a:83:04:33:50:4e:4d:5f:5b:6a:98:08:78:73:31:
                    f7:f4:09:49:f4:40:2f:d9:72:ba:d0:54:82:31:4c:
                    5b:7f:db:27:cb:ea:79:d8:1b:96:2a:2f:71:fb:05:
                    0b:d5:b2:70:ca:42:10:d6:74:6c:da:b3:68:5c:c6:
                    2a:24:a1:ce:62:be:79:96:c1:8e:45:1d:77:0f:c9:
                    09:1e:6f:2e:ff:02:52:57:03:b4:5a:c7:30:99:3c:
                    a0:f2:1c:70:9c:2b:be:a3:71:9c:53:60:71:d3:f7:
                    aa:15:e4:71:ea:f9:60:06:e5:36:a5:f3:ba:22:9b:
                    8b:e5:b9:e8:9d:9f:52:b3:26:4d:b1:44:55:44:bd:
                    fe:4d:71:98:17:c9:ec:23:7a:b1:05:79:8b:0b:92:
                    2e:29:fe:fe:dd:85:ae:66:0f:da:0d:b9:88:63:00:
                    f7:d2:67:a6:12:45:42:36:10:b6:08:66:35:43:b8:
                    0a:ca:09:b0:56:8b:0c:9b:2c:a5:c1:00:be:b6:83:
                    f0:a6:8b:44:1f:24:1b:80:30:8c:22:95:a7:33:fa:
                    d7:db:25:1f:7a:e6:89:24:81:7e:ee:14:f0:8e:d7:
                    54:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:3B:E2:70:A8:EF:BD:E0:A3:9E:32:8F:34:5E:96:89:8D:B9:17:63
            X509v3 Authority Key Identifier:
                keyid:23:B6:77:C3:D9:DE:AB:E9:70:47:31:32:DA:13:9A:7E:28:FF:35:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4c3cd5f9f99449a9d5c415bb976bf368d87776d9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c1b5cd0c-cfcd-4d54-8df6-4d8f7aab486f/0ef8af27ee855ea164e5534deffd967560d523af.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/c1b5cd0c-cfcd-4d54-8df6-4d8f7aab486f/4c3cd5f9f99449a9d5c415bb976bf368d87776d9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.162.63.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4b:58:7d:25:30:12:35:cd:2f:e8:d1:c3:cd:88:c4:25:af:7d:
         ab:06:8b:42:d0:ab:8a:f5:94:2c:f0:47:bf:04:bf:24:f0:98:
         44:ae:7b:74:7b:b4:48:f4:48:a5:4d:fe:be:9d:d0:db:96:de:
         06:b4:74:73:c3:85:ea:13:25:89:19:3f:56:eb:e1:c8:14:f9:
         b5:f2:56:8a:ff:32:63:4b:5d:f6:d8:86:aa:f5:f0:ae:bd:34:
         b2:52:92:f3:10:a0:c8:17:1e:83:d4:7b:60:d8:13:61:da:de:
         3f:48:83:ca:68:56:f3:cb:e1:6d:73:99:bd:c8:88:23:ab:29:
         8a:eb:64:c7:fe:a5:9c:4b:22:e2:7c:03:12:76:54:2b:63:0b:
         54:3b:35:09:36:89:46:e4:ee:e3:a5:b0:87:ad:ca:7d:cd:39:
         4a:86:2b:32:dc:a2:ed:68:a2:50:50:a2:99:b8:01:01:cf:c4:
         7d:2c:44:70:f7:9f:1e:a4:13:89:d7:26:8d:e5:3a:88:7a:c2:
         09:98:69:c2:f7:d1:0f:95:f3:64:6b:e3:ca:bb:4f:bd:c8:51:
         0b:7a:b9:58:77:8b:53:50:91:2c:a4:de:13:ea:0a:25:e4:e6:
         bc:1e:cd:f7:6a:93:3f:58:55:b9:76:df:00:40:22:81:6a:1d:
         97:20:53:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:30 2024 by rpki-client on console-fra.rpki-client.org